A vulnerability was found in code-projects Simple Flight Ticket Booking System 1.0. It has been classified as critical. This impacts an unknown function of the file /Adminadd.php. The manipulation of the argument flightno/airplaneid/departure/dtime/arrival/atime/ec/ep/bc/bp leads to sql injection.
This vulnerability is referenced as CVE-2026-3710. Remote exploitation of the attack is possible. Furthermore, an exploit is available.
